[PR #1838] [MERGED] build(deps): bump megalinter/megalinter from 7.0.2 to 7.0.4 #2151

New issue

Closed

opened 2026-03-01 21:54:13 +03:00 by kerem · 0 comments

kerem commented 2026-03-01 21:54:13 +03:00

Owner

Copy link

📋 Pull Request Information

Original PR: https://github.com/nektos/act/pull/1838
Author: @dependabot[bot]
Created: 6/5/2023
Status: ✅ Merged
Merged: 6/5/2023
Merged by: @mergify[bot]

Base: master ← Head: dependabot/github_actions/megalinter/megalinter-7.0.4

---

📝 Commits (2)

• 2770184 build(deps): bump megalinter/megalinter from 7.0.2 to 7.0.4
• 9b62f84 Merge branch 'master' into dependabot/github_actions/megalinter/megalinter-7.0.4

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 .github/workflows/checks.yml (+1 -1)

📄 Description

Bumps megalinter/megalinter from 7.0.2 to 7.0.4.

Release notes

Sourced from megalinter/megalinter's releases.

MegaLinter v7.0.4

What's Changed

• Core

  • Allow to define linterkey_UNSECURED_ENV_VARIABLES for specific linters to make them visible when necessary (ex: GITHUB_TOKEN for TERRAFORM_TFLINT) by @​nvuillam in oxsecurity/megalinter#2703

• Documentation

  • Add note to terraform_tflint about TERRAFORM_TFLINT_UNSECURED_ENV_VARIABLES by @​ruzickap in oxsecurity/megalinter#2706

• Linter versions upgrades

  • checkov from 2.3.261 to 2.3.267
  • djlint from 1.29.0 to 1.30.0
  • pyright from 1.1.310 to 1.1.311
  • semgrep from 1.23.0 to 1.24.0
  • standard from 17.0.0 to 17.1.0
  • terragrunt from 0.45.16 to 0.45.17

MegaLinter is graciously provided by

Full Changelog: https://github.com/oxsecurity/megalinter/compare/v7.0.3...v7.0.4

MegaLinter v7.0.3

What's Changed

• Linter enhancements & fixes

  • New variable TERRAFORM_TFLINT_SECURED_ENV with default value true. Set to false to allow tflint --init to access your env vars.

• Core

  • Secure PRE_COMMANDS and POST_COMMANDS by default
  • Can be disabled with secured_env: false in the command definition
  • Manage v6 retrocompatibility with FILTER_REGEX_INCLUDE and FILTER_REGEX_EXCLUDE expression

• Linter versions upgrades

  • checkov from 2.3.259 to 2.3.261
  • checkstyle from 10.11.0 to 10.12.0
  • kubescape from 2.3.3 to 2.3.4

MegaLinter is graciously provided by

Full Changelog: https://github.com/oxsecurity/megalinter/compare/v7.0.2...v7.0.3

Changelog

Sourced from megalinter/megalinter's changelog.

[v7.0.4] - 2023-05-31

• Core

  • Allow to define linterkey_UNSECURED_ENV_VARIABLES for specific linters to make them visible when necessary (ex: GITHUB_TOKEN for TERRAFORM_TFLINT)

• Documentation

  • Add note to terraform_tflint about TERRAFORM_TFLINT_UNSECURED_ENV_VARIABLES by @​ruzickap in oxsecurity/megalinter#2706

• Linter versions upgrades

  • checkov from 2.3.261 to 2.3.267
  • djlint from 1.29.0 to 1.30.0
  • pyright from 1.1.310 to 1.1.311
  • semgrep from 1.23.0 to 1.24.0
  • standard from 17.0.0 to 17.1.0
  • terragrunt from 0.45.16 to 0.45.17

[v7.0.3] - 2023-05-29

• Linter enhancements & fixes

  • New variable TERRAFORM_TFLINT_SECURED_ENV with default value true. Set to false to allow tflint --init to access your env vars.

• Core

  • Secure PRE_COMMANDS and POST_COMMANDS by default
  • Can be disabled with secured_env: false in the command definition
  • Manage v6 retrocompatibility with FILTER_REGEX_INCLUDE and FILTER_REGEX_EXCLUDE expression

• Linter versions upgrades

  • checkstyle from 10.11.0 to 10.12.0 on 2023-05-27
  • kubescape from 2.3.3 to 2.3.4 on 2023-05-28
  • checkov from 2.3.259 to 2.3.261 on 2023-05-28

Commits

• 0d014ff Release MegaLinter v7.0.4
• 1af426d [automation] Auto-update linters version, help and documentation (#2709)
• a10d136 [automation] Auto-update linters version, help and documentation (#2708)
• b137b09 [automation] Auto-update linters version, help and documentation (#2705)
• 60306fe [automation] Auto-update linters version, help and documentation (#2704)
• 5cd8a86 Allow to define _UNSECURED_ENV_VARIABLES for specific linters (#2703)
• 429032d typo
• d392674 Use markdown for video
• b7dda67 Upgrade to v7 video
• 2b1998e Release MegaLinter v7.0.3
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/nektos/act/pull/1838 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 6/5/2023 **Status:** ✅ Merged **Merged:** 6/5/2023 **Merged by:** [@mergify[bot]](https://github.com/apps/mergify) **Base:** `master` ← **Head:** `dependabot/github_actions/megalinter/megalinter-7.0.4` --- ### 📝 Commits (2) - [`2770184`](https://github.com/nektos/act/commit/2770184ceadbb5112e0e00955ad0b8fce2750f98) build(deps): bump megalinter/megalinter from 7.0.2 to 7.0.4 - [`9b62f84`](https://github.com/nektos/act/commit/9b62f847e761e39ba16d14784d3139e789d3d5ac) Merge branch 'master' into dependabot/github_actions/megalinter/megalinter-7.0.4 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/checks.yml` (+1 -1) </details> ### 📄 Description Bumps [megalinter/megalinter](https://github.com/megalinter/megalinter) from 7.0.2 to 7.0.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/megalinter/megalinter/releases">megalinter/megalinter's releases</a>.</em></p> <blockquote> <h2>MegaLinter v7.0.4</h2> <h2>What's Changed</h2> <ul> <li> <p>Core</p> <ul> <li>Allow to define <code>linterkey_UNSECURED_ENV_VARIABLES</code> for specific linters to make them visible when necessary (ex: GITHUB_TOKEN for TERRAFORM_TFLINT) by <a href="https://github.com/nvuillam"><code>@​nvuillam</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2703">oxsecurity/megalinter#2703</a></li> </ul> </li> <li> <p>Documentation</p> <ul> <li>Add note to terraform_tflint about TERRAFORM_TFLINT_UNSECURED_ENV_VARIABLES by <a href="https://github.com/ruzickap"><code>@​ruzickap</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2706">oxsecurity/megalinter#2706</a></li> </ul> </li> <li> <p>Linter versions upgrades</p> <ul> <li><a href="https://www.checkov.io/">checkov</a> from 2.3.261 to <strong>2.3.267</strong></li> <li><a href="https://djlint.com/">djlint</a> from 1.29.0 to <strong>1.30.0</strong></li> <li><a href="https://github.com/Microsoft/pyright">pyright</a> from 1.1.310 to <strong>1.1.311</strong></li> <li><a href="https://semgrep.dev/">semgrep</a> from 1.23.0 to <strong>1.24.0</strong></li> <li><a href="https://standardjs.com/">standard</a> from 17.0.0 to <strong>17.1.0</strong></li> <li><a href="https://terragrunt.gruntwork.io">terragrunt</a> from 0.45.16 to <strong>0.45.17</strong></li> </ul> </li> </ul> <p><em>MegaLinter is graciously provided by <a href="https://www.ox.security/?ref=megalinter"><img src="https://www.ox.security/wp-content/uploads/2022/06/logo.svg?ref=megalinter_comment" alt="OX Security" /></a></em></p> <p><strong>Full Changelog</strong>: <a href="https://github.com/oxsecurity/megalinter/compare/v7.0.3...v7.0.4">https://github.com/oxsecurity/megalinter/compare/v7.0.3...v7.0.4</a></p> <h2>MegaLinter v7.0.3</h2> <h2>What's Changed</h2> <ul> <li> <p>Linter enhancements &amp; fixes</p> <ul> <li>New variable <strong>TERRAFORM_TFLINT_SECURED_ENV</strong> with default value <code>true</code>. Set to <code>false</code> to allow <code>tflint --init</code> to access your env vars.</li> </ul> </li> <li> <p>Core</p> <ul> <li>Secure PRE_COMMANDS and POST_COMMANDS by default</li> <li>Can be disabled with <strong>secured_env: false</strong> in the command definition</li> <li>Manage v6 retrocompatibility with FILTER_REGEX_INCLUDE and FILTER_REGEX_EXCLUDE expression</li> </ul> </li> <li> <p>Linter versions upgrades</p> <ul> <li><a href="https://www.checkov.io/">checkov</a> from 2.3.259 to <strong>2.3.261</strong></li> <li><a href="https://checkstyle.sourceforge.io">checkstyle</a> from 10.11.0 to <strong>10.12.0</strong></li> <li><a href="https://github.com/kubescape/kubescape">kubescape</a> from 2.3.3 to <strong>2.3.4</strong></li> </ul> </li> </ul> <p><em>MegaLinter is graciously provided by <a href="https://www.ox.security/?ref=megalinter"><img src="https://www.ox.security/wp-content/uploads/2022/06/logo.svg?ref=megalinter_comment" alt="OX Security" /></a></em></p> <p><strong>Full Changelog</strong>: <a href="https://github.com/oxsecurity/megalinter/compare/v7.0.2...v7.0.3">https://github.com/oxsecurity/megalinter/compare/v7.0.2...v7.0.3</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/oxsecurity/megalinter/blob/main/CHANGELOG.md">megalinter/megalinter's changelog</a>.</em></p> <blockquote> <h2>[v7.0.4] - 2023-05-31</h2> <ul> <li> <p>Core</p> <ul> <li>Allow to define <code>linterkey_UNSECURED_ENV_VARIABLES</code> for specific linters to make them visible when necessary (ex: GITHUB_TOKEN for TERRAFORM_TFLINT)</li> </ul> </li> <li> <p>Documentation</p> <ul> <li>Add note to terraform_tflint about TERRAFORM_TFLINT_UNSECURED_ENV_VARIABLES by <a href="https://github.com/ruzickap"><code>@​ruzickap</code></a> in <a href="https://redirect.github.com/oxsecurity/megalinter/pull/2706">oxsecurity/megalinter#2706</a></li> </ul> </li> <li> <p>Linter versions upgrades</p> <ul> <li><a href="https://www.checkov.io/">checkov</a> from 2.3.261 to <strong>2.3.267</strong></li> <li><a href="https://djlint.com/">djlint</a> from 1.29.0 to <strong>1.30.0</strong></li> <li><a href="https://github.com/Microsoft/pyright">pyright</a> from 1.1.310 to <strong>1.1.311</strong></li> <li><a href="https://semgrep.dev/">semgrep</a> from 1.23.0 to <strong>1.24.0</strong></li> <li><a href="https://standardjs.com/">standard</a> from 17.0.0 to <strong>17.1.0</strong></li> <li><a href="https://terragrunt.gruntwork.io">terragrunt</a> from 0.45.16 to <strong>0.45.17</strong></li> </ul> </li> </ul> <h2>[v7.0.3] - 2023-05-29</h2> <ul> <li> <p>Linter enhancements &amp; fixes</p> <ul> <li>New variable <strong>TERRAFORM_TFLINT_SECURED_ENV</strong> with default value <code>true</code>. Set to <code>false</code> to allow <code>tflint --init</code> to access your env vars.</li> </ul> </li> <li> <p>Core</p> <ul> <li>Secure PRE_COMMANDS and POST_COMMANDS by default</li> <li>Can be disabled with <strong>secured_env: false</strong> in the command definition</li> <li>Manage v6 retrocompatibility with FILTER_REGEX_INCLUDE and FILTER_REGEX_EXCLUDE expression</li> </ul> </li> <li> <p>Linter versions upgrades</p> <ul> <li><a href="https://checkstyle.sourceforge.io">checkstyle</a> from 10.11.0 to <strong>10.12.0</strong> on 2023-05-27</li> <li><a href="https://github.com/kubescape/kubescape">kubescape</a> from 2.3.3 to <strong>2.3.4</strong> on 2023-05-28</li> <li><a href="https://www.checkov.io/">checkov</a> from 2.3.259 to <strong>2.3.261</strong> on 2023-05-28</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/oxsecurity/megalinter/commit/0d014ffdef3307ca4a4cd1ddf482fc4f05733d7c"><code>0d014ff</code></a> Release MegaLinter v7.0.4</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/1af426df21936e75b154444bd0453869ed4cdf83"><code>1af426d</code></a> [automation] Auto-update linters version, help and documentation (<a href="https://redirect.github.com/megalinter/megalinter/issues/2709">#2709</a>)</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/a10d136c9cbb200c747d68cd77b86378d0d0a64c"><code>a10d136</code></a> [automation] Auto-update linters version, help and documentation (<a href="https://redirect.github.com/megalinter/megalinter/issues/2708">#2708</a>)</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/b137b0929dcd895cd8110ca5df046976161182f8"><code>b137b09</code></a> [automation] Auto-update linters version, help and documentation (<a href="https://redirect.github.com/megalinter/megalinter/issues/2705">#2705</a>)</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/60306fec31c8d6520f3ec70161872ecdc1647170"><code>60306fe</code></a> [automation] Auto-update linters version, help and documentation (<a href="https://redirect.github.com/megalinter/megalinter/issues/2704">#2704</a>)</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/5cd8a86b159d3670caabc6d08a7dcf83edf6d7d1"><code>5cd8a86</code></a> Allow to define _UNSECURED_ENV_VARIABLES for specific linters (<a href="https://redirect.github.com/megalinter/megalinter/issues/2703">#2703</a>)</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/429032dc3926b61eb22b8fe4fb19effad91c2639"><code>429032d</code></a> typo</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/d392674cc5acf92b0394117c1a8a7bd5016aee75"><code>d392674</code></a> Use markdown for video</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/b7dda6712ce38b415f5411db89ab6d479b1f5b58"><code>b7dda67</code></a> Upgrade to v7 video</li> <li><a href="https://github.com/oxsecurity/megalinter/commit/2b1998e443e5757ace627e9af2094d0f1a2f80b4"><code>2b1998e</code></a> Release MegaLinter v7.0.3</li> <li>Additional commits viewable in <a href="https://github.com/megalinter/megalinter/compare/v7.0.2...v7.0.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- _{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

kerem 2026-03-01 21:54:13 +03:00

• closed this issue
• added the
  pull-request
  label

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

master

dependabot/go_modules/github.com/go-git/go-git/v5-5.18.0

dependabot/go_modules/dependencies-08815e2262

mergify/configuration-deprecated-update

dependabot/github_actions/dependencies-a3a104477f

chore/simplify-ci-and-makefile

dependabot/go_modules/golang.org/x/crypto-0.45.0

dependabot/go_modules/github.com/go-viper/mapstructure/v2-2.4.0

panekj/ci/improve-jobs

fix-skip-non-yaml-files-in-dir

normalize-pull-rebuild-flags

fix-no-recurse-by-default

2517-poor-error-for-incomplete-action-step

2472-make-use-new-action-cache-the-new-default-for-downloading-actions

act-tart

act-lxc

act-oidc

act-dind

avoid-slash-in-actor

dependabot/go_modules/github.com/docker/docker-26.1.4incompatible

meta-keep-filetime

local-repository-action-cache

pr-merger

update-docker-deps

follow_local_action_symlink

boltdb-lock-in-handler

use-socket-path

no-pull-no-rebuild

path-issues

fix/env

feat/podman

refactor/testdata

v0.2.87

v0.2.86

v0.2.85

v0.2.84

v0.2.83

v0.2.82

v0.2.81

v0.2.80

v0.2.79

v0.2.78

v0.2.77

v0.2.76

v0.2.75

v0.2.74

v0.2.73

v0.2.72

v0.2.71

v0.2.70

v0.2.69

v0.2.68

v0.2.67

v0.2.66

v0.2.65

v0.2.64

v0.2.63

v0.2.62

v0.2.61

v0.2.60

v0.2.59

v0.2.58

v0.2.57

v0.2.56

v0.2.55

v0.2.54

v0.2.53

v0.2.52

v0.2.51

v0.2.50

v0.2.49

v0.2.48

v0.2.47

v0.2.46

v0.2.45

v0.2.44

v0.2.43

v0.2.42

v0.2.41

v0.2.40

v0.2.39

v0.2.38

v0.2.37

v0.2.36

v0.2.35

v0.2.34

v0.2.33

v0.2.32

v0.2.31

v0.2.30

v0.2.29

v0.2.28

v0.2.27

v0.2.26

v0.2.25

v0.2.24

v0.2.23

v0.2.22

v0.2.21

v0.2.20

v0.2.19

v0.2.18

v0.2.17

v0.2.16

v0.2.15

v0.2.14

v0.2.13

v0.2.12

v0.2.11

v0.2.10

v0.2.9

v0.2.8

v0.2.7

v0.2.6

v0.2.5

v0.2.4

v0.2.3

v0.2.2

v0.2.1

v0.2.0

v0.1.3

v0.1.2

v0.1.1

v0.1.0

v0.0.5

v0.0.4

v0.0.3

v0.0.2

v0.0.1

Labels

Clear labels   

area/action

  

area/cli

  

area/docs

  

area/image

  

area/runner

  

area/workflow

  

backlog

  

confirmed/not-planned

  

kind/bug

  

kind/discussion

  

kind/external

  

kind/feature-request

  

kind/question

  

meta/duplicate

  

meta/invalid

  

meta/need-more-info

  

meta/resolved

  

meta/wontfix

  

meta/workaround

  

needs-work

  

pull-request

Mirrored from GitHub Pull Request

  

review/not-planned

  

size/M

  

size/XL

  

size/XXL

  

stale

  

stale-exempt

No labels

area/action

area/cli

area/docs

area/image

area/runner

area/workflow

backlog

confirmed/not-planned

kind/bug

kind/discussion

kind/external

kind/feature-request

kind/question

meta/duplicate

meta/invalid

meta/need-more-info

meta/resolved

meta/wontfix

meta/workaround

needs-work

pull-request

review/not-planned

size/M

size/XL

size/XXL

stale

stale-exempt

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/act#2151

No description provided.